Allied Telesis AT-S63 - Manual (Page 843)

AT-S63 Management Software Menus Interface User’s Guide
Section VIII: Management Security 843
Mask
You need to enter a mask that indicates the parts of the IP address the
switch should filter on. A binary “1” indicates the switch should filter on the
corresponding bit of the address, while a “0” indicates that it should not. If
you are filtering on a specific IP address, use the mask 255.255.255.255.
If you are filtering on a subnet, enter the appropriate mask. For example,
to allow all management stations in the subnet 149.11.11.0 to manage the
switch, you would enter the mask 255.255.255.0.
Protocol
This specifies the protocol of the management packets. You can only
select TCP because Telnet and web browser management packets for an
AT-9400 Series switch are exclusively that protocol.
Interface
The interface parameter allows you control whether the remote
management station can manage the switch using Telnet, a web browser,
or both. For example, you might create an ACE that states that a particular
remote management station can only use a web browser to manage the
switch.
Management
ACL Guidelines
Below are guidelines to observe when you create a management ACL:
ˆ The default setting for this feature is disabled.
ˆ A switch has only one management ACL.
ˆ A management ACL can have up to 256 ACEs.
ˆ An ACE must have an IP address and mask.
ˆ All management ACEs are implicit “permit” statements. A management
packet that meets the criteria of an ACE is accepted by the switch.
Consequently, the ACEs that you enter into the management ACL
should specify which management packets you want the switch to
process. Management packets that do not meet any of the ACEs in the
management ACL are discarded.
ˆ A management packet that meets an ACE is immediately processed
by the switch and is not compared against any remaining ACEs in the
management ACL.
ˆ The ACEs are performed in the order in which they are entered in the
ACL. Because all ACEs in a management ACL are implicit permit
statements, it does not matter in which order you enter them.
ˆ The protocol is always TCP.
ˆ The management ACL does not control local management or remote
SSH or SNMP management of a switch.